Microsoft Confirms Rogue Planet Defender Zero-Day, Says Patch is in Development
Summary: Microsoft disclosed it is developing a patch for a Defender zero-day codenamed RoguePlanet, now tracked as CVE-2026-50656 with a CVSS score of 7.8, an elevation of privilege in the Microsoft Malware Protection Engine. The researcher Chaotic Eclipse (aka Nightmare-Eclipse) released the exploit nearly a week earlier, describing it as a race condition that grants a SYSTEM-level shell and reporting a 100% success rate on some machines while it struggled on others.
Key Takeaway: The researcher says the proof of concept works whether real-time protection is on or off, so the Defender setting security teams rely on may not stop this one - and it is the fourth Defender flaw Chaotic Eclipse has disclosed, after BlueHammer, UnDefend and RedSun.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-33825CVE-2026-41091CVE-2026-45498CVE-2026-50656
- Related